...
Implementing Your Own Security Data Access Object
In order to implement a new security data access object, one needs to implement UserDetailsService, an Acegi Security interface, and UserRoleListService IUserRoleListService, a Pentaho interface. To implement UserDetailsService, please consult the Acegi Security documentation. UserDetailsService implementations know how to get a user's record along with roles from some backend, given a username. The UserRoleListService IUserRoleListService interface is required for the Pentaho BI Platform administrative user interface for assigning access to action sequences. It's also a requirement for some of the security input parameters (e.g. listing all users).